General
- Target DOC-VKPMIJ.zip
- Size 593B
- Sample260803-qrr5eszdqa
- SHA256 342af730519d5cae4005c3ac11db8bdf0687a779029cd1f47de4cfada97bed63
- MD5 ed7e063b8ae6d7d7ea3047c2f049e830
- SHA1 b472362665d39f7a8317de9bf2ba6d784765d24d
- SHA512 bd7a5d20dbbd56aa1e155353ad9266be6d35a3b01a5fc60176105f035ede72d1b7d4eabe9cb39ceff9f398869efdd33c8390edbd559bfab352949949abc9a3e8
- TLSH T173F02619892D5198DC16F4F9986B0BD942FEC830B30F4C8D1FF6580C6C42F468F95438
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VKPMIJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VKPMIJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-VKPMIJ.lnk
- Size 1KB
- SHA256 acf712d7250dc93fac01243633bcd9ac67de16aa436efaa9ce1470ea8c969b93
- MD5 f10fbef331443147007edac6416b45bf
- SHA1 c1cd976d89cc850f4b70e57fa62b6cd3e108640b
- SHA512 f60b846f3a3005228f648cacc47d14bcab83254d30bc7ef5244304e8a2d9ef1c183bc9fd5b350399f3ce20bfd621da42163f229d9e342f708da6dd9706168f41
- TLSH T15D31CB403FF90624F3F78F7384BB9B2084BFB8968E20C61E4141464C507AA08E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.